CLAIMS 

1 . (currently amended) A method of securing data in a computer network and transparently 
establishing and managing the separation of user-based commvmities of interest based upon crypto- 
graphically separated, need to know security levels, said data having one or more security sensitive words, 
data obj ects, characters or icons, said computer network having a pluraUty of computers interconnected 
together, one of said pluraUty of computers designated as a data input computer and each of said pluraUty 
of computers having a memory therein, a fn - st and a second memoiy respective memories designated as 
a remainder store and an cxti ' act store respective extract stores in one or more computers of said plurality 
of computers, said user-based conraiunities of interest representing a plurality of users having a 
corresponding a pluraUty of security levels each with a respective security clearance and respective extract 
store> comprising: 

filtering data input 6om said data input computer and extracting said security sensitive words, data 
obj ects, characters or icons fi-om said data to obtain (a) subsets of extracted data and (b) remainder data; 

storing said subsets of extracted data and said remainder data in said extract store respective 
extract stores and said remainder store, respectively; and, 

permitting reconstruction of some or all of said data via one or more of said subsets of extracted 
data and remainder data only in the presence of a predetermined security clearance of said plurality of 
security levels. 

2. (original) A method as claimed in claim 1 wherein said crypto-graphically separated, need 
to know security levels correspond to respective ones of said plurality of security levels, the method 
including encrypting said subsets of extracted data with corresponding degrees of encryption associated 
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with said plurality of security levels, and including decrypting, during the reconstruction, of some or all of 
said subsets of extracted data only in the presence of said respective security level of said plurality of 
security levels. 

3 . (original) A method as claimed in claim 2 including utilizing placeholders in said remainder 
data representing non-reconstructed, extracted data during the reconstruction, said placeholders being one 
from the group of characters, icons, substitute words, data objects, underline and blank space. 

4. (original) Amethod as claimed in claim 3 wherein aplurality of placeholders are utilized, said 
placeholders including characters, icons, substitute words, data objects, underline and blank spaces 
grouped to represent each respective security level of said plurality of security levels. 

5. (original) Amethodasclaimedin claim 1 including defining apluralityof filters, corresponding 
to said subsets of extracted data, prior to said filtering step. 

6. (original) A method as claimed in claim 1 including encrypting said subsets of extracted data 
and remainder data prior to storing. 

7. (original) A method as claimed in claim 6 wherein the step of permitting reconstruction 
includes decrypting said subsets of extracted data and remainder data. 

8. (original) Amefhodasclaimedinclaimlwhereinsaidpluralityofcomputers are configured 
in aclient-servernetwork within whichrespective computers are designated by respective uniform resource 
locators (URLs) and said storing utilizes the URL for one or both of said extract store and said remainder 
store. 

9 . (original) A method as claimed in claim 1 wherein said plurality of computers are configured 
in a client-server network within which respective computers are designated by respective uniform resource 
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locators (URLs) and said data input computer operates as a client in said client-server network and one 
of said plurality of computers is designated as a server computer, the method including sending said 
extracted data from said data input computer to said server computer utilizing the respective URL, 

1 0. (original) A method as claimed in claim 9 wherein said step of permitting reconstruction 
includes downloading said extracted data from said server computer utilizing said respective URL. 

1 1 . (original) Amethod as claimed in claim 1 wherein said plurality of computers are configured 
in a client-server networic within which respective computers are designated by respective uniform resource 
locators (URLs) and said data input computer operates as a client in said client-server network and one 
of said plurality of computers is designated as a server computer, the method including sending said 
extracted data from said data input computer to the computer with said extract store utilizing the respective 
URL as controlled by said server computer. 

12. (original) A method as claimed in claim 1 0 including the step of encrypting and decrypting 
said remainder data and extracted data during sending and downloading. 

1 3 . (original) A method as claimed in claim 1 1 including the step of encrypting said extracted 
data during sending and downloading and decrypting said extracted data during reconstruction. 

14. (original) A method as claimed in claim 1 wherein one computer of said plurality of 
computers includes a data display system with at least two separate but visually overlaid displays and at 
least two respective display interfaces, the step of reconstruction including displaying said extracted data 
on one of said at least two displays and displaying said remainder data on another of said at least two 
displays. 
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15. (original) A method as claimed in claim 1 wherein one computer of said pluraUty of 
computers includes a display fed from video memory having a plurality of frame memory segments, and 
who'ein the reconstmction step of the method includes interleaving extracted data and remainder data into 
respective ones of said plurality of frame memory segments. 

16. (original) A method as claimed in claim 1 including deleting said data input from said data 
input computer after the step of storing. 

1 7. (original) A method as claimed in claim 1 including mapping said storing of said subsets of 
extracted data with encryption. 

18. (original) A method as claimed in claim 1 wherein one ofthe steps of filtering, storing and 
permitting reconstmction utilize one of an inference engine, neural network and artificial intelligence process 
to filter, store and permit reconstruction. 

19. (original) A method as claimed in claim 1 whereinsaid security sensitivedataobjects are one 
or more portions of an audio file and the step of reconstmction utilizes extracted data representative of said 
one or more portions of said audio file. 

20. (original) A method as claimed in claim 4 including encrypting said remainder data prior to 

storing. 

2 1 . (original) A method as claimed in claim 20 wherein the step of permitting reconstruction 
includes decrypting said remainder data. 

22. (original) A method as claimed in claim 21 wherein said plurahty of con^uters are configure 
in a client-server network within which respective computers are designated by respective uniform resource 
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locators (URLs) and said storing utilizes the URL for one or both of said extract store and said remainder 
store. 

23. (original) Amethodasclaimedinclaini21 whereinsaidpliiraUtyof computers are configu^ 
in a client-server network within which respective computers are designated by respective uniform resource 
locators (URLs) and said data input computer operates as a client in said client-server network and one 
of said plurality of computers is designated as a server computer, the method including sending said 
extracted data from said data input computer to the computer with said extract store utilizing the respective 
URL as controlled by said server computer. 

24. (original) A method as claimed in claim 23 including the step of encrypting and decrypting 
said remainder data and extracted data during sending and downloading. 

25. (original) A method as claimed in claim 24 wherein one computer of said pluraUty of 
computers includes a data display system with at least two separate but visually overlaid displays and at 
least two respective display interfaces, the step of reconstruction including displaying said extracted data 
on one of said at least two displays and displaying said remainder data on another of said at least two 
displays. 

26. (original) A method as claimed in claim 24 wherein one computer of said pliu-ality of 
computers includes a display fed from video memory having a plurality of frame memory segments, and 
wherein the reconstruction step of the method includes interleaving extracted data and remainder data into 
respective ones of said plurality of frame memory segments. 

27 . (original) A method as claimed in claim 24 including deleting said data input from said data 
input computer after the step of storing. 
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28. (original) A methcd as claimed in claim 27 including mapping said stori^ 
extracted data with encryption. 

29. (currently amended) A computerreadable medium containing programming instructions 
for securing data in a computer network and transparently establishing and managing the separation of user- 
based communities of interest based upon crypto-gr^hically separated, need to know security levels, said 
data having one or more security sensitive words, data objects, characters or icons, said computer network 
having a plurality of computers interconnected together, one of said plurality of computers designated as 
a data input computer and each of said plurality of computers having a memory therein, afii - standascc o nd 
mcmoiy respective memories designated as a remainder store and an exti ' ac t store respective extract stores 
in one or more computers of said plurality of computers, said user-based conununities of interest 
representing a plurahty of users having a corresponding a plurality of security levels each with a respective 
security clearance and respective extract store, the programming instructions comprising: 

filtering data input &om said data input computer and extracting said security sensitive words, data 
objects, characters or icons fi-om said data to obtain (a) subsets of extracted data and (b) remainder data; 

storing said subsets of extracted data and said remainder data in said c xti act s to r e respective 
extract stores and said remainder store, respectively; and, 

permitting reconstruction of some or all of said data via one or more of said subsets of extracted 
data and remainder data only in the presence of a predetermined security clearance of said plurality of 
security levels. 

30. (original) Amediumwithprogramminginstmctionsasclaimedclaim29whereinsaidcrypto- 
graphically separated, need to know security levels correspond to respective ones of said plurality of 
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security levels, the instructions including encrypting said subsets of extracted data with corresponding 
degrees of encryption associated with said plurality of security levels, and including decrypting, during the 
reconstruction, of some or all of said subsets of extracted data only in the presence of said respective 
security level of said plurality of security levels. 

3 1 . (original) A medium with programming instructions as claimed claim 30 including utilizing 
placeholders in said remainder data representing non-reconstructed, extracted data during the 
reconstruction, said placeholders being one from the group of characters, icons, substitute words, data 
objects, underline and blank space. 

32. (original) A medium with programming instnictioiis as claimed claim 31 wherein a plu^ 
of placeholders are utilized, said placeholders including characters, icons, substitute words, data objects, 
underline and blank spaces grouped to represent each respective security level of said plurality of security 
levels. 

33 . (original) Amedium withprogramming instmctions as claimed claim 29 wherein said plurality 
of computers are configured in a chent-server network within which respective computers are designated 
by respective uniform resource locators (URLs) and the instructions for said storing utilizes the URL for 
one or both of said extract store and said remainder store. 

34. (original) Amediumwithprograinminginstmctionsasclaimedclaim29 wherein said plurality 
of computers are configured in a client-server network within which respective computers are designated 
by respective uniform resource locators (URLs) and said data input computer operates as a chent in said 
client-server network and one of said plurality of computers is designated as a server computer, the 
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instructions including sending said extracted data from said data input computer to the computer with said 
extract store utihzing the respective URL as controlled by said server computer. 

35. (original) Amedium vvdthprograniming instructions as claimed claim 34 inc^ 
and decrypting said remainder data and extracted data during sending and downloading. 

36. (original) A medium withprograrnminginstmctions as claimed claim 29 includm 
data input from said data input computer after the step of storing. 

37. (original) A medium with progranraiinginstmctions as claimed claim 29 including mappm^ 
said storing of said subsets of extracted data with encryption. 

38. (original) Amediumwithpiogramminginstructionsasclaimedclaim 32 including ena^ 
said remainder data prior to storing. 

39. (original) Amedumwithprogramnnttnginstructionsasclaimedclaim38whereinthe step of 
permitting reconstruction includes decrypting said remainder data. 

40. (original) Amediumwithprogramminginstmctionsasclaimedclaim39 wherd^ 

of computers are configured in a client-server network within which respective computers are designated 
by respective uniform resource locators (URLs) and the instructions for said storing utilizes the URL for 
one or both of said extract store and said remainder store. 

4L (original) A medium with programniinginstmctions as claimed claim 39 wherein said plural 
of computers are configured in a client-server network within which respective computers are designated 
by respective uniform resource locators (URLs) and said data input computer operates as a chent in said 
client-server network and one of said plurality of computers is designated as a server computer, the 
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instructions including sending said extracted data from said data input computer to the computer with said 
extract store utilizing the respective URL as controlled by said server computer. 

42. (original) Amediumwithprogramminginstmctionsasclaimedclaim41 including encrypting 
and decrypting said remainder data and extracted data during sending and downloading. 

43. (original) Amediumwithprograninndnginstmction^ deleting said 
data input from said data input computer after the step of storing. 

44. (original) A medium with programming instnictions as claimed claim 43 including moping 
said storing of said subsets of extracted data with encryption. 

45. (original) A medium with programming instructions as claimed claim 29 wherein the 
programming instructions for one of the filtering, storing and permitting reconstruction utilize one of an 
inference engine, neural network and artificial intelligence process to filter, store and permit reconstruction. 

46. (original) Amediumwithpiogramminginstmctionsasclaimedclaim29whereinsaidsecxmty 
sensitive data objects are one or more portions of an audio file and the programming instructions for 
reconstruction utilizes extracted data representative of said one or more portions of said audio file. 

47. (currently amended) An information processing system for securing data in a computer 
network and transparently establishing and managing the separation of user-based communities of interest 
based upon crypto-graphically separated, need to know security levels, said data having one or more 
security sensitive words, data obj ects, characters or icons, said computer network having a plurality of 
computers for a plurality of users all interconnected together, one of said plurality of computers designated 
as a data input computer and each of said plurality of computers having a memory therein, a first and a 
sec o nd mem o ry respective memories designated as a remainder store and aii e xti ' act st o re respective 
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extract stores in one or more computers of said plurality of computers, said user-based communities of 
interest representing said plurality of users having a corresponding a plurality of security levels each with 
a respective security clearance and respective extract store , comprising: 

means for filtering data input fi-om said data input computer and extracting said security sensitive 
words, data objects, characters or icons firom said data to obtain (a) subsets of extracted data and (b) 
remainder data; 

means for storing said subsets of extracted data and said remainder data in said respective extract 
store and said remainder store, respectively; and, 

means for permitting reconstruction of some or all of said data via one or more of said subsets of 
extracted data and remainder data only in the presence of a predetermined security clearance of said 
plurality of security levels. 

48. (original) An information processing system as claimed in claim 47 wherein said crypto- 
graphically separated, need to know security levels correspond to respective ones of said pluraUty of 
security levels, the system including means for encrypting said subsets of extracted data with corresponding 
degreesof encryption associated with said pluralityof security levels, and including means for decrypting, 
during the reconstruction, of some or all of said subsets of extracted data only in the presence of said 
respective security level of said plurality of security levels. 

49. (original) An infonnation processing system as claimed in claim 48 including placehold 
said remainder data representing non-reconstructed, extracted data during the reconstruction, said 
placeholders being one firom the group of characters, icons, substitute words, data objects, underline and 
blank space. 
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50. (original) An information processing system as claimed in claim 49 including a plurality of 
placeholders including characters, icons, substitute words, data objects, underline and blank spaces 
grouped to represent each respective security level of said plurality of security levels. 

5 1 . (original) An information processing system as claimed in claim 47 including means for 
defining a plurality of filters, corresponding to said subsets of extracted data, prior to said filtering step. 

52. (original) An information processing system as claimed in claim 47 including means for 
encrypting said subsets of extracted data and remainder data prior to storing. 

53 . (original) An information processing system as claimed in claim 52 wherein said means for 
permitting reconstruction includes means for decrypting said subsets of extracted data and remainder data. 

54. (original) An informationprocessing system as claimed in claim 47 wherein said plurality of 
computers are configured in a chent-server network within which respective computers are designated by 
respective uniform resource locators (URLs) and said means for storing utilizes the URL for one or both 
of said extract store and said remainder store. 

5 5 . (original) An information processing system as claimed in claim 47 wherein said plurality of 
computers are configured in a client-server network within which respective computers are designated by 
respective uniform resource locators (URLs) and said data input computer operates as a client in said 
client-server network and one of said plurality of computers is designated as a server computer, the system 
including means for sending said extracted data fi"om said data input computer to the computer with said 
extract store utilizing the respective URL as controlled by said server computer. 

56. (original) An information processing system as claimed in claim 55 including means for 
encrypting and decrypting said remainder data and extracted data during sending and downloading. 

12 



57. (original) An information processing system as claimed in claim 47 wherein one computer 
of said plurality of computers includes a data display system with at least two separate but visually overlaid 
displays and at least two respective display interfaces, the means for reconstruction including means for 
displaying said extracted data on one of said at least two displays and displaying said remainder data on 
another of said at least two displays. 

5 8 . (original) An information processing system as claimed in claim 47 wherein one computer 
of saidplurality of computers includes a display fed fix)m video memory having aplurality of frame memory 
segments, and wherein said means for reconstruction includes means for interleaving extracted data and 
remainder data into respective ones of said plurality of frame memory segments. 

59. (original) An information processing system as claimed in claim 47 including means for 
deleting said data input from said data input computer after storing. 

60. (original) An information processing system as claimed in claim 47 including means for 
mapping the storing of said subsets of extracted data with encryption. 

6 1 . (original) An information processing system as claimed in claim 50 including means for 
encrypting said remainder data prior to storing. 

62. (original) An information processing system as claimed in claim 61 whereinsaid means for 
reconstruction includes means for decrypting said remainder data. 

63 . (original) An information processing system as claimed in claim 62 wherein said plurality of 
computers are configured in a client-server network within which respective computers are designated by 
respective uniform resource locators (URLs) and said means for storing utilizes the URL for one or both 
of said extract store and said remainder store. 
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64. (original) An Monnation processing system as claimed in claim 62 wh^ 

computers are configured in a client-server network within which respective computers are designated by 
respective uniform resource locators (URLs) and said data input computer operates as a client in said 
client-server network and one of said plurality of computers is designated as a server computer, the sj^tem 
including means for sending said extracted data from said data input computer to the computer with said 
extract store utilizing the respective URL as controlled by said server computer. 

65 . (original) An information processing system as claimed in claim 64 including means for 
encrypting and decrypting said remainder data and extracted data during sending and downloading. 

66. (original) An information processing system as claimed in claim 65 wherein one computer 
of said plurality of computers includes a data display system with at least two separate but visually overlaid 
displays and at least two respective display interfaces, the means for reconstruction including means for 
displaying said extracted data on one of said at least two displays and displaying said remainder data on 
another of said at least two displays. 

67. (original) An information processing system as claimed in claim 65 wherein one computer 
of said plurality of computers includes a display fed from video memory having a plurality of frame memory 
segments, and the means for reconstruction includes means for interleaving extracted data and remainder 
data into respective ones of said plurality of frame memory segments. 

68. (original) An information processing system as claimed in claim 65 including means for 
deleting said data input from said data input computer after storing. 

69. (original) An information processing system as claimed in claim 68 including means for 
mapping the storing of said subsets of extracted data with encryption. 
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70. (original) An inforrmtion processing system as claimed in cla^ 

for filtering, means for storing and means for permitting reconstruction utilize one of an inference engine, 
neural network and artificial intelligence process to filter, store and permit reconstruction. 

7 1 . (original) An information processing system as claimed in claim 47 wherein said security 
sensitive data obj ects are one or more portions of an audio file and said means for reconstruction utilizes 
extracted data representative of said one or more portions of said audio file. 

72. (currently amended) A method of securing data and transparently managing the 
separation of user-based communities of interest based upon crypto-graphically separated, need to know 
security levels with a plurality of encryption types, said data having one or more security sensitive words, 
data objects, characters or icons, said user-based communities of interest representing a plurality of users 
having a corresponding a plurality of security levels each with a respective security clearance and respective 
extract stores, comprising: 

filtering data and extracting said security sensitive words, data objects, characters or icons fi-om 
said data to obtain (a) subsets of extracted data for said respective extract stores and (b) remainder data; 
encrypting said subsets of extracted data with said plurality of encryption types; and, 
permitting reconstruction of some or all of said data via one or more of said subsets of encrypted 
extracted data and remainder data only in the presence of a predetermined security clearance of said 
plurality of security levels. 

73. (currently amended) A method of securing data and transparently managing the 
separation of user-based communities of interest based upon crypto-graphically separated, need to know 
security levels with a plurality of encryption types, said data having one or more security sensitive words, 

15 



data obj ects, characters or icons, said user-based communities of interest representing a plurality of users 
having a corresponding a plurality of security levels each with a respective security clearance and respective 
extract stores , comprising: 

filtering data and extracting said security sensitive words, data objects, characters or icons fi-om 
said data to obtain (a) subsets of extracted data for said respective extract stores and (b) remainder data; 

encrypting said subsets of extracted data with said plurality of encryption types to obtain multiple 
level encryption in one document or data object; and, 

decrypting all or portions of said one document or data object with multiple level encryption only 
in the presence of a predetermined security clearance of said plurality of security levels. 



16 



